topic Re: Remediate ZOMBIE POODLE Vulnerability on FTD1010 managed via FDM in Network Security

Remediate ZOMBIE POODLE Vulnerability on FTD1010 managed via FDM

kbowles — Tue, 07 Jan 2025 21:42:35 GMT

Hi All,

After completing an external pentest we were informed our FTD1010 is vulnerable to the ZOMBIE POODLE attack. I have found articles on how to remove the affected CBC ciphers via FMC but our device is managed via FDM. Does anyone know of a way to complete this as I cant seem to find any information myself. This firewall is running code 7.4.2.1-30

Thanks!

Re: Remediate ZOMBIE POODLE Vulnerability on FTD1010 managed via FDM

Marvin Rhoads — Wed, 08 Jan 2025 08:55:27 GMT

You can follow this section of the configuration guide:

https://www.cisco.com/c/en/us/td/docs/security/firepower/740/fdm/fptd-fdm-config-guide-740/fptd-fdm-system.html#Cisco_Task_in_List_GUI.dita_80e542fa-4b68-4611-bdcc-c0dee2540488

There you will be able to disable the CBC ciphers.